I realized that the password of one of my Google accounts has probably been compromised for more than a year or so. I already changed the password of that account, however I am worried about other Google accounts that were linked to this account (like recovery address). Is there a way I can be sure that those other accounts were not accessed using my compromised account?

If I am able to log-in to my other accounts using their passwords (they have different passwords than the compromised one), then is it a sure guarantee that those accounts were not accessed by using the compromised recovery address? In other words, is it possible (or has it been in the last couple of years at least) to access a Google account using their recovery address without changing/resetting the password?

  • Welcome. Please narrow the question to a single service. You might post another question to ask about the other service.
    – Rubén
    May 21 '20 at 17:55
  • @Rubén Thanks. Narrowed it to Google only. May 28 '20 at 15:20

Google account access can only be done having signed in using a valid password and under certain circumstances it could require that the user also use another method to validate the they should have access to the account.

The only way to get a link to access a Google account is by following the required steps to recover it which always will require to set a new password.


  • "...which always will require to set a new password" - that's the key part. So I can rest assured that as long as I can log-in to my Google account using my old password, that account has not been accessed using a compromised recovery address. Thanks. Jun 5 '20 at 21:06
  • Not exactly. It's better to do the security check-up and to change your password frequently. The security check-up for the Google account is done from the account settings.
    – Rubén
    Jun 5 '20 at 21:37

Not the answer you're looking for? Browse other questions tagged or ask your own question.